*.spgi.spglobal.com
- S&P Global Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 06:cd:9f:11:c1:74:9f:51:91:c6:bb:db:5b:44:af:e1 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
S&P Global Inc.
Organization:
S&P Global Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:cd:9f:11:c1:74:9f:51:91:c6:bb:db:5b:44:af:e1Serial Number (int): 9043015140586472910918972036276858849
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 40:7e:00:df:f6:49:01:2e:c9:d7:06:49:f3:bb:9b:53:a0:e5:98:3e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 32:44:fc:3b:b6:ea:f5:c4:ed:ae:0d:19:21:d1:30:73:6f:ce:16:3a
Fingerprint (sha256): 03:05:08:22:ae:9b:28:22:f1:92:8a:05:8e:66:a8:71:50:7c:73:67:b0:79:ca:da:14:73:68:49:17:9c:cc:ac
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate *.spgi.spglobal.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.spgi.spglobal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.spgi.spglobal.com
spgi.spglobal.com
spgi.spglobal.com
Other certificates including the domain name spglobal.com
(limited to 100 certificates)
Lync2013EMEADRExt1.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com
Certificate
The complete raw certificate details for *.spgi.spglobal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgIQBs2fEcF0n1GRxrvbW0Sv4TANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA1MTYwMDAwMDBa Fw0yMzA1MTYyMzU5NTlaMGsxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azERMA8GA1UEBxMITmV3IFlvcmsxGDAWBgNVBAoMD1MmUCBHbG9iYWwgSW5jLjEc MBoGA1UEAwwTKi5zcGdpLnNwZ2xvYmFsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKo5DFKDF9VLhbFd/ibzGc/vVrq8pgQLdB91lFxUOYpLqi/h hl8swSntJJe6whJjshUUOJwaOkD1xBplz2pRbXk08Z5NdaSuFzvLlLru7/6iQcnT 04CzlkHFLQU10D9eYTRw/iVJ01bpFGMm14yFrvXkEuUkL3Pkxwbdxjovwp9IYsM8 uua1zVVvZlbkLEzZD1fjCIdnyO5oQnVSkhUA0LDRmT6pjLhLxUCP9pPuDDLy4NQE 7CkA3SkmAidbaL3EfxjEf9SnDZkRWOPrtvaQfCh+1BMi1NCGxTIdaKrETcCFrVjk lRb5JZxzd1KUpCPK0jKcPlmMHdWLWzuk7NzBEo0CAwEAAaOCA4cwggODMB8GA1Ud IwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBRAfgDf9kkBLsnX Bknzu5tToOWYPjAxBgNVHREEKjAoghMqLnNwZ2kuc3BnbG9iYWwuY29tghFzcGdp LnNwZ2xvYmFsLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+ oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1 NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAC hj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy NTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSC AWsBaQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgM3BAd0A AAQDAEcwRQIhAISWrEFAUczGaO+FbRUPo60adnHG4YSR2lyaFcN51oQVAiBKF0mV Cy5bybz9Ez+6aZqLWRr7JT/Me/SVXs/38u+7UAB3ADXPGRu/sWxXvw+tTG1Cy7u2 JyAmUeo/4SrvqAPDO9ZMAAABgM3BAe0AAAQDAEgwRgIhAI7kwSi0BA/CuR4SSv8w 1P3pmZWNr+FDaVaDs1WTBWUzAiEAvaEUoQk0CAde67knx7nHcSHemnLlLG0ABsHX wY71KVoAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYDNwQHf AAAEAwBHMEUCIDBhAjJS7eUYFTrCuhiKxJgsTvuso78Vu7ob+2bUsf9LAiEAlzQP tZ3PNGmAaDkmVgXrNbT7I5dFj0gwx6pZvErLepkwDQYJKoZIhvcNAQELBQADggEB AEIFUP24P5nMSa9/Zoeieu+MhWMAPmgoTI+IXBWTgWT827gGLM7Qf+RskgDiz1gM 0n4xumgpLlXNZKbJMgtqU01L6QfFa2326rxst20RoYQx8uK3pilEo78FF8XR+e6i DP0sA5Uv7es1MEpEXOFzatJezLmm7AX9W4Fh6OvHR0ET5C/FTtkXdTYnGPjGIGlQ jM03L+ktlTmg01zIdvrrjAVHPSDJZDSiyRfVOZzOS7TWuBdRsi5GZlzFFQE6MuLN GVMJfrumgM/hok7tuTMIQLrOEla61R1DCwx8r7YB9/4wAkdicCdtLSQbL249i9PT rtNja+wKUMLwnze+2CrDdcY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkMUoMX1UuFsV3+JvMZ z+9WurymBAt0H3WUXFQ5ikuqL+GGXyzBKe0kl7rCEmOyFRQ4nBo6QPXEGmXPalFt eTTxnk11pK4XO8uUuu7v/qJBydPTgLOWQcUtBTXQP15hNHD+JUnTVukUYybXjIWu 9eQS5SQvc+THBt3GOi/Cn0hiwzy65rXNVW9mVuQsTNkPV+MIh2fI7mhCdVKSFQDQ sNGZPqmMuEvFQI/2k+4MMvLg1ATsKQDdKSYCJ1tovcR/GMR/1KcNmRFY4+u29pB8 KH7UEyLU0IbFMh1oqsRNwIWtWOSVFvklnHN3UpSkI8rSMpw+WYwd1YtbO6Ts3MES jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9043015140586472910918972036276858849 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S&P Global Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.spgi.spglobal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21488643327597101865050029729771630036921823234635446220267969280888433709580164603653646224565458784648127282154691983883122622043610874078282785752740792205705851065527831101961642398887743124978962489977144813162241583512350699648501335179166512290560133341382565113209622272725017447947020748113573022084012185063638812255187311504714209307425031358686417768469416484409700660936370474432139151670489161147680398748249360548085443395307599696433077860436398638306421814988054544190460537703653660046809994402783776964332028164509345242940729454754564019041540994383425903838705446555579484746728683918309650928269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 407e00dff649012ec9d70649f3bb9b53a0e5983e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spgi.spglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spgi.spglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000180cdc101dd00000403004730450221008496ac414051ccc668ef856d150fa3ad1a7671c6e18491da5c9a15c379d6841502204a1749950b2e5bc9bcfd133fba699a8b591afb253fcc7bf4955ecff7f2efbb5000770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180cdc101ed00000403004830460221008ee4c128b4040fc2b91e124aff30d4fde999958dafe143695683b35593056533022100bda114a1093408075eebb927c7b9c77121de9a72e52c6d0006c1d7c18ef5295a007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000180cdc101df000004030047304502203061023252ede518153ac2ba188ac4982c4efbaca3bf15bbba1bfb66d4b1ff4b02210097340fb59dcf3469806839265605eb35b4fb2397458f4830c7aa59bc4acb7a99 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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